| { |
| "bomFormat": "CycloneDX", |
| "specVersion": "1.5", |
| "serialNumber": "urn:uuid:83b784de-afcc-45ec-95c2-49c7f7b49efe", |
| "version": 1, |
| "metadata": { |
| "timestamp": "2023-11-14T17:20:16.784Z", |
| "tools": { |
| "components": [ |
| { |
| "group": "@cyclonedx", |
| "name": "cdxgen", |
| "version": "9.9.3", |
| "purl": "pkg:npm/%40cyclonedx/cdxgen@9.9.3", |
| "type": "application", |
| "bom-ref": "pkg:npm/@cyclonedx/cdxgen@9.9.3", |
| "author": "OWASP Foundation", |
| "publisher": "OWASP Foundation" |
| } |
| ] |
| }, |
| "authors": [ |
| { |
| "name": "OWASP Foundation" |
| } |
| ], |
| "component": { |
| "group": "", |
| "name": "without-core", |
| "version": "latest", |
| "type": "application", |
| "bom-ref": "pkg:pypi/without-core@latest", |
| "purl": "pkg:pypi/without-core@latest", |
| "components": [] |
| } |
| }, |
| "components": [ |
| { |
| "group": "", |
| "name": "arrow", |
| "version": "1.2.3", |
| "purl": "pkg:pypi/arrow@1.2.3", |
| "type": "library", |
| "bom-ref": "pkg:pypi/arrow@1.2.3", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 1, |
| "methods": [ |
| { |
| "technique": "instrumentation", |
| "confidence": 1, |
| "value": "/tmp/cdxgen-venv-zyf83L" |
| } |
| ] |
| } |
| } |
| }, |
| { |
| "group": "", |
| "name": "python-dateutil", |
| "version": "2.8.2", |
| "purl": "pkg:pypi/python-dateutil@2.8.2", |
| "type": "library", |
| "bom-ref": "pkg:pypi/python-dateutil@2.8.2", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-plexus-1.0.0/python3.6/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-plexus-1.0.0/python3.6/without-core/requirements.txt" |
| } |
| ] |
| }, |
| { |
| "group": "", |
| "name": "six", |
| "version": "1.16.0", |
| "purl": "pkg:pypi/six@1.16.0", |
| "type": "library", |
| "bom-ref": "pkg:pypi/six@1.16.0", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-plexus-1.0.0/python3.6/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-plexus-1.0.0/python3.6/without-core/requirements.txt" |
| } |
| ] |
| } |
| ], |
| "services": [], |
| "dependencies": [ |
| { |
| "ref": "pkg:pypi/without-core@latest", |
| "dependsOn": [] |
| }, |
| { |
| "ref": "pkg:pypi/python-dateutil@2.8.2", |
| "dependsOn": [ |
| "pkg:pypi/six@1.16.0" |
| ] |
| }, |
| { |
| "ref": "pkg:pypi/six@1.16.0", |
| "dependsOn": [] |
| }, |
| { |
| "ref": "pkg:pypi/arrow@1.2.3", |
| "dependsOn": [ |
| "pkg:pypi/python-dateutil@2.8.2" |
| ] |
| } |
| ] |
| } |